Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Doneren met Mollie <= 2.8.4 - Information Disclosure
Improper Verification of Cryptographic Signature in PySAML2
SAML XML Signature wrapping in PySAML2
Digital Climate Strike WP <= 1.0.0 - Malicious Redirect
Blind SQL injection in PrestaShop productcomments module
Cross-site Request Forgery in fastify-csrf
Prototype Pollution in immer
CORS misconfiguration in socket.io
Prototype pollution in gsap
Prototype pollution in JointJS
Deserialization of untrusted data in jackson-databind
Drupal core - SA-CORE-2021-001
Under Construction <= 3.85 - Authenticated Stored Cross-Site Scripting
Advanced Custom Fields Pro <= 5.9.0 - Reflected Cross-Site Scripting
123ContactForm for WordPress <= 1.5.6 - Arbitrary File Upload
123ContactForm for WordPress <= 1.5.6 - Arbitrary Post Creation
CSV Injection vulnerability with exported contact lists in Mautic
XSS vulnerability in company name field in Mautic
Inline JS XSS vulnerability in Mautic
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
Disabled users able to log in with third party SSO plugin
XSS vulnerability in theme config file in Mautic
XSS vulnerability in Author URL of themes in Mautic
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.